Strategic risk management

Strategic risk is the category most registers handle worst, because the exposures that genuinely threaten a strategy do not decompose neatly into controls with owners and residual scores. A business model made obsolete, a market that moves before you do, a reputation spent faster than it was earned.

The guides here define what strategic risks are with concrete examples, separate strategic from operational risk without pretending the boundary is clean, and set out a practitioner framework for running strategic risk as something other than an annual slide. There is also material on converging risk oversight with strategic planning, which is where the discipline either earns a seat at the table or does not. Climate and sustainability disclosure sits close to this in practice, and several pieces here cover emissions scopes and reporting standards.

See sustainability and climate risk for the disclosure detail, and enterprise risk management and governance, risk and compliance for the governance layer.